Uniswap Built Pools That Check Every Wallet. One Issuer Power Goes Further

Uniswap has spent years being shorthand for markets that anyone can enter.

Its newest v4 standard starts with a different question: Is this wallet allowed?

Permissioned Pools bring issuer-controlled compliance checks into the automated market maker itself. A wallet can be approved to swap, approved to provide liquidity, approved for both or shut out entirely.

Then there is a stronger control.

The issuer behind either permissioned asset in a pool can force-close a liquidity position.

That power is real, but it is not unlimited. Uniswap’s contracts spell out where the assets must go and prevent one issuer from simply taking the other issuer’s token.

Uniswap Labs launched the open-source Permissioned Pools standard with Superstate, Securitize and Dowgo. It is designed for tokenized funds, equities and other regulated assets that cannot legally move between anonymous wallets without restrictions, while preserving Uniswap v4’s concentrated-liquidity mechanics and supporting pools that pair a permissioned asset with either an ordinary token or another issuer’s permissioned asset under its own eligibility rules.

The checks do not live only on a website. They execute in the contracts attached to the pool.

That difference matters because a frontend block can be bypassed. A protocol-level rule follows the transaction no matter which compatible interface submits it.

Introducing Permissioned Pools on Uniswap v4

A new hook standard that brings permissioned assets to the AMM with compliance checks enforced at the protocol level

Built in collaboration with @SuperstateInc, @Securitize, Dowgo, and other leading teams bringing value onchain pic.twitter.com/WS4AohMYEJ

— Uniswap (@Uniswap) July 23, 2026

The system is built from four contracts, and the Permissions Adapter sits at the center.

Uniswap’s architecture documents explain that the adapter holds the underlying permissioned token and mints a wrapped representation for trading inside the shared v4 PoolManager. The other pieces are a permissioned hook that checks each action, a non-transferable position manager for liquidity NFTs and a router that coordinates the wrapping, trade and withdrawal steps, separating custody, eligibility, position ownership and routing across distinct contracts instead of one all-powerful wrapper.

The raw regulated asset never enters that shared contract.

Users do not have to manage the wrapper themselves. The Universal Router wraps the asset before the pool interaction and unwraps it on the way out.

That design solves a basic collision between regulated tokens and a shared AMM.

An issuer may allowlist only verified investors. The PoolManager, meanwhile, serves many unrelated pools and cannot be added to every issuer’s private list as though it were one ordinary holder.

The adapter becomes the approved holder while the pool trades the representation.

The permission check happens twice on a swap: once when the router wraps the input and again when the hook runs immediately before the trade.

Liquidity has its own flag. A wallet that may buy or sell an asset is not automatically allowed to become a market maker for it.

Those controls are set by the issuer, not by UNI holders.

Uniswap’s deployment guide gives the adapter owner authority to replace the allowlist checker, approve or revoke routing contracts, pause or resume swaps and approve the hook used by the pool. It also requires the owner to connect the adapter and position manager deliberately, creating a configuration sequence that must be completed before the pool is ready for public use and leaving each approved router subject to later removal.

New adapters begin with swapping disabled. The issuer turns trading on only after the rest of the configuration is in place.

The same admin key can call unwindPosition.

That function burns a liquidity provider’s position NFT, removes the liquidity and routes both assets out of the pool.

Permissioned position NFTs are non-transferable in the first place. An approved investor cannot hand the position to an unapproved wallet and use the NFT as a back door around the asset’s restrictions.

An investor can still reduce or burn a position voluntarily, even after losing permission to swap or add more liquidity.

The forced unwind exists for the other side of that problem: an issuer may be required to remove exposure after a holder no longer qualifies.

The routing rule is the critical limit.

Each asset goes to the holder first. If that wallet is no longer permitted to receive one of the assets, only that undeliverable asset falls back to its own issuer.

In a pool containing two regulated tokens from two different issuers, either issuer can trigger the unwind. Neither can use it to collect the other firm’s asset.

The adapter owner also cannot transfer the position or pull arbitrary funds through the wrapped token.

That is why “non-custodial” still applies here, but with a large asterisk. The user’s assets remain inside smart-contract settlement flows, yet the issuer retains the power to alter eligibility, pause trading and force a position to close.

1/ Superstate assets are coming to @Uniswap.

Uniswap Labs just launched the Permissioned Pools standard on v4, for regulated assets like tokenized equities and funds to trade on AMMs.

We helped shape this infrastructure standard.

Here’s what it unlocks: https://t.co/mp96d501Vd

— Superstate (@SuperstateInc) July 23, 2026

Superstate says its assets are coming to the standard. Securitize says the design gives regulated assets access to AMM liquidity while preserving issuer-defined controls.

That combination is the point.

Tokenized securities have always been able to exist on a blockchain. Giving them a liquid secondary market without breaking their transfer rules has been the harder part.

A normal Uniswap pool assumes that a valid address can participate. A regulated fund may need to know whether that address completed identity checks, lives in an eligible jurisdiction or fits a required investor class.

Permissioned Pools let the asset carry those restrictions into the market rather than relying on an exchange operator to enforce them offchain.

They also create a new concentration of operational risk.

The allowlist checker has to be correct. The adapter owner has to be secured.

An admin error or compromised key could pause a market, reject valid wallets or force liquidity positions to unwind.

Uniswap explicitly describes the adapter admin as a high-leverage key and points issuers toward stronger arrangements such as multisignature control.

There is another gate outside the contracts. A verified pool must be separately approved by Uniswap Labs before it can appear in the Uniswap interface and API routing.

Anyone can still create ordinary v4 pools. Permissioned Pools do not convert Uniswap as a whole into a closed venue.

They create a separate lane where open AMM infrastructure can host assets whose owners are not allowed to be open to everyone.

That tension will define whether the standard works.

Institutions get programmable liquidity and onchain settlement. Investors get smart-contract execution without pretending the asset has shed its legal restrictions.

Issuers keep the controls regulators may require.

The cost is that “permissioned” reaches much deeper than a wallet check. It reaches the position itself, all the way to an issuer’s power to close it.

Join the conversation!

We have no tolerance for comments containing violence, racism, profanity, vulgarity, doxing, or discourteous behavior. If a comment is spam, instead of replying to it please click the icon below and to the right of that comment. Thank you for partnering with us to maintain fruitful conversation.